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DETAILED ACTION 
Response to Amendment 

1 . Amendments to the specification and claims filed 05/29/07 have been entered. Claims 1- 
31 , and 34-35 are still pending and claims 32 - 33 have been cancelled. Objections to the 
specification and claim rejections not otherwise noted have been duly overcome and are 
therefore withdrawn. 

Information Disclosure Statement 

2. The information disclosure statement (IDS) submitted on 03/30/2004 was filed before 
any final Office action. The Examiner thanks the Applicant for submitting copies of the non- 
patent literature publications. The submission is in compliance with the provisions of 37 
CFR 1.97. Accordingly, the information disclosure statement is being considered by the 
Examiner. 

Response to Arguments 

3. Applicant's arguments filed 05/29/2007 have been fully considered but they are not 
persuasive. It is Applicant's assertion that DeBellis does not disclose or suggest the feature of a 
storage unit that is operable to store a parameter which is used to change a probability of 
decryption error in decrypting encrypted text with regard to claim 1. The Examiner respectfully 
disagrees. The update and restoration algorithm of DeBellis ensures that repetition of a 
pseudorandom number does not result. As such the Examiner believes this to be equivalent to 
Applicant's claim limitation since this feature relies upon a hashing function to ensure the 
integrity and secrecy of encrypted text reducing the probability of decryption errors as in the 
instant application, (see column 5, lines 40-51) 

In further regards to claim 1, Applicant argues that the disclosure of DeBellis does not 
suggest that encryption takes place according to an encryption algorithm which changes the 
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probability of the decryption error in decrypting the encrypted text depending on a value of the 
parameter. Again the Examiner respectfully disagrees. DeBellis disclose an encryption function 
along with a replacement function. This replacement function serves as the feature that changes 
the probability of decryption error since it replaces bits of the input. Again this ensures the 
integrity and secrecy of each ciphertext and plaintext, (see column 12, lines 15-16) 

With respect to claim 14, Applicant contends that Geiringer does not recite the features 
of a decryption key updating request unit operable to request an encryption apparatus to update 
the decryption key, according to a result of a judgment made by the judgment unit. The 
Examiner respectfully disagrees. Geiringer discloses the recovery of an original message 
polynomial therefore a skill artisan would appreciate that such a result would be achieved by the 
recovery and update of a corresponding decryption key used to decipher the message, (see p. 
28, lines 12- 20) As such Geiringer meets Applicant's claim limitation. 

With further regard to claim 14, Applicant argues that the disclosure of Geiringer does 
not suggest an encryption apparatus being requested to change the value of a parameter to an 
initial value which decreases the probability of the decryption error in decrypting the encrypted 
text. Again the Examiner respectfully disagrees. Geiringer discloses the successful recovery of 
an original message polynomial. The erroneous parameter value that resulted in the initial non- 
recovery of the message is replaced with the correct and original parameter value necessary to 
recover the original message polynomial, therefore a skilled artisan would appreciate that such 
a value would be different from that of the erroneous parameter value. As such Geiringer 
discloses that the correct and original value is used as a starting point to continue to the next 
message. Therefore the recovery of the correct and original values of Geiringer is equivalent to 
the initial value of Applicant's claimed invention since recovery of the original message yielded a 
resolution to a decryption error, (see p. 28, lines 12-20) 
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For claim 8 and similar claim 22, it is Applicant's assertion that that Nishio does not 
disclose an updating unit updates a parameter according to the number of times encryption is 
performed. In response to applicant's arguments against the references individually, one cannot 
show nonobviousness by attacking references individually where the rejections are based on 
combinations of references. See In re Keller, 642 R2d 413, 208 USPQ 871 (CCPA 1981); In re 
Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. Cir. 1986). 

All other claims not specifically discussed are rejected by virtue of dependency for 
similar rationale presented. For at least these reasons the Examiner maintains the rejection of 
claims 1 - 31 and 34 - 35. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on sale in 
this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1, 2, 7, 13, 26, 27 and 34 are rejected under 35 U.S.C. 102(b) as being 
anticipated by DeBellis et al. U.S. Patent No. 6,104,810 (hereinafter DeBellis). 

5. Regarding claim 1: DeBellis discloses an encryption apparatus for generating an 
encrypted text by encrypting a plaintext, said encryption apparatus comprising: 

a storage unit operable to store an encryption key and a parameter, the parameter being 
adapted to a decryption apparatus and being used to change a probability of decryption error in 
decrypting the encrypted text (col. 5 lines 40-51); 

an encryption unit operable to generate the encrypted text from the plaintext, using the 
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encryption key and the parameter stored in said storage unit, according to an encryption 
algorithm which changes the probability of the decryption error in decrypting the encrypted text 
depending on a value of the parameter (col. 12 lines 15-26); and 

an updating unit operable to update the parameter stored in said storage unit (col. 5 
lines 40-51). 

6. Regarding claims 26 and 34: DeBellis discloses an encryption method, program, and 
program storage device, respectively, for generating an encrypted text by encrypting a plaintext, 
said encryption method comprising: 

an encrypted text generating step of generating the encrypted text from the plaintext, 
using the encryption key and a parameter, according to an encryption algorithm which changes 
the probability of the decryption error in decrypting the encrypted text depending on a value of 
the parameter adapted to a decryption apparatus (col. 12 lines 15-26); and 

an updating step of updating the parameter (col. 5 lines 40-51). 

7. Regarding claim 2: DeBellis discloses that said updating unit updates the parameter 
stored in said storage unit after a passage of a predetermined amount of time. (col. 5 lines 40- 
51). 

8. Regarding claims 7 and 27: DeBellis discloses that said updating unit updates the 
parameter stored in said storage unit so that the probability of the decryption error in decrypting 
the encrypted text increases with a passage of time (col. 5 lines 15-27). 

9. Regarding claim 13: DeBellis discloses an encryption key updating unit operable to 
receive, from the decryption apparatus, a request to update the encryption key, and to update 
the encryption key in response to the updating request (col. 7 lines 26-32); and a parameter 
initialization unit operable to receive, from the decryption unit, a request to update the parameter 
(col. 5 lines 28-39), and set, in response to the initialization request, a value of the parameter to 
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an initial value which decreases the probability of the decryption error to a value less than or 
equal to a predetermined value (col. 12 lines 15-26). 

10. Claims 14, 17, 31, and 35 are rejected under 35 U.S.C. 102(b) as being anticipated 
by Geiringer, PCT Publication No. WO 01/93013 A1 (hereinafter Geiringer). 

1 1 . Regarding claim 14: Geiringer discloses a decryption apparatus for decrypting an 
encrypted text, said decryption apparatus comprising: 

a decryption unit operable to generate a decrypted text using a decryption key, from the 
encrypted text generated according to an encryption algorithm which changes a probability of 
decryption error in decrypting the encrypted text depending on a value of a parameter (page 22 
lines 15-18); 

a judgment unit operable to judge whether or not the decrypted text is obtained correctly 
(page 27 lines 25-28); 

a decryption key updating request unit operable to request an encryption apparatus to 
update the decryption key, according to a result of the judgment made by said judgment unit 
(page 28 lines 12-20); and 

a parameter initialization request unit operable to request the encryption apparatus to 
change the value of the parameter to an initial value which decreases the probability of the 
decryption error in decrypting the encrypted text to a value less than or equal to a 
predetermined value (page 28 lines 18-20). 

12. Regarding claim 17: Geiringer discloses that said judgment unit judges that the 
decrypted text is not obtained correctly when the probability of the decryption error in decrypting 
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the encrypted text during a predetermined period of time exceeds a predetermined threshold 
(page 28 lines 22-28). 

13. Regarding claims 31 and 35: Geiringer discloses a decryption method, program, and 
program storage device, respectively, for decrypting an encrypted text, said decryption 
comprising: 

a decryption step of generating a decrypted text using a decryption key, from the 
encrypted text generated according to an encryption algorithm which changes a probability of 
decryption error in decrypting the encrypted text depending on a value of a parameter (page 22 
lines 15-18); 

a judgment step of judging whether or not the decrypted text is obtained correctly (page 
27 lines 25-28); 

an updating request step of requesting an encryption apparatus to update the decryption 
key, according to a result of the judgment in the judgment step (page 28 lines 12-20); and 

an initialization request step of requesting the encryption apparatus to change the value 
of the parameter to an initial value which decreases the probability of decryption error to a value 
less than or equal to a predetermined value, according to the result of the judgment in the 
judgment step (page 28 lines 18-20). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 102 
of this title, if the differences between the subject matter sought to be patented and ttie prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 
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14. Claims 3-5, 10, 11, 18-20, 25, 29, and 30 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over DeBellis in view of Geiringer. 

15. Regarding claim 18: DeBellis discloses an encryption system comprising an encryption 
apparatus (col. 6 line 39) including: 

a storage unit operable to store an encryption key and a parameter, the parameter being 
adapted to a decryption apparatus and being used to change a probability of decryption error in 
decrypting the encrypted text (col. 5 lines 40-51); 

an encryption unit operable to generate the encrypted text, from the plaintext, using the 
encryption key and the parameter stored in the storage unit, according to an encryption 
algorithm which changes the probability of the decryption error in decrypting the encrypted text 
depending on a value of the parameter (col. 12 lines 15-26); and 

an updating unit operable to update the parameter stored in the storage unit (col. 5 lines 

40-51). 

DeBellis does not disclose a decryption apparatus for generating a decrypted text by 
decrypting the encrypted text, and the decryption apparatus including: a decryption unit 
operable to generate a decrypted text from the encrypted text using a decryption key; a 
decryption key updating request unit operable to request the encryption apparatus to update the 
decryption key; and a parameter initialization request unit operable to request the encryption 
apparatus to change the value of the parameter to an initial value which decreases the 
probability of the decryption error to a value less than or equal to a predetermined value. 

Geiringer discloses an encryption system (page 22 lines 15-18) comprising a decryption 
apparatus for generating a decrypted text by decrypting the encrypted text, the decryption 
apparatus (page 26 line 28) including: 
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a decryption unit operable to generate a decrypted text from the encrypted text using a 
decryption key (page 22 lines 15-18); 

a decryption key updating request unit operable to request the encryption apparatus to 
update the decryption key (page 28 lines 12-20); and 

a parameter initialization request unit operable to request the encryption apparatus to 
change the value of the parameter to an initial value which decreases the probability of the 
decryption error to a value less than or equal to a predetermined value (page 28 lines 18-20). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis by the decryption components of an encryption 
system as taught by Geiringer in order to create an efficient and secure encryption system 
based on mixing seeds (see Geiringer page 16 lines 24-25). 

16. Regarding claims 3, 10, 23, and 29: DeBellis does not disclose that said encryption 
unit generates the encrypted text using the encryption algorithm based on an NTRU encryption 
method. Geiringer discloses that the encryption unit generates the encrypted text using the 
encryption algorithm based on an NTRU encryption method (page 1 lines 7-11). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis for use of the NTRU algorithm as taught by 
Geiringer in order to create an efficient and secure encryption system based on mixing seeds 
(see Geiringer page 16 lines 24-25). 

17. Regarding claims 4, 11 and 30: DeBellis discloses a parameter stored in said storage 
unit and an updating unit operating in after a passage of the predetermined amount of time (coL 
5 lines 40-51). 
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DeBellis does not disclose that the parameter indicates the number of terms whose 
coefficients indicate 1 in a random number polynomial based on the NTRU encryption method 
or that the number of terms whose coefficients indicate 1 in the random number polynomial is 
increased. Geiringer discloses that the parameter indicates the number of terms whose 
coefficients indicate T in a random number polynomial (page 22 lines 5-12) based on the NTRU 
encryption method (page 1 lines 7-11) and that the number of terms whose coefficients indicate 
1 in the random number polynomial is increased (page 3 lines 14-18). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis for use of the NTRU algorithm as taught by 
Geiringer in order to create an efficient and secure encryption system based on mixing seeds 
(see Geiringer page 16 lines 24-25). 

18. Regarding claim 5: DeBellis discloses an encryption key updating unit operable to 
receive, from the decryption apparatus, a request to update the encryption key and to update 
the encryption key in response to the updating request (col. 7 lines 26-32); and an initialization 
unit (col. 5 lines 28-39) and setting in response to the updating request, an initial value which 
decreases the probability of the decryption error to a value less than or equal to a 
predetermined value (col. 12 lines 15-26). 

DeBellis does not disclose updating or setting the number of the terms whose 
coefficients indicate 1 in the random number polynomial. 

Geiringer discloses updating or setting the number of the terms whose coefficients 
indicate 1 in the random number polynomial (page 22 lines 5-12). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis for use of the NTRU algorithm as taught by 
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Geiringer in order to create an efficient and secure encryption system based on mixing seeds 
(see Geiringer page 16 lines 24-25). 

19. Regarding claim 19: DeBellis discloses that the updating unit updates the parameter 
stored in the storage unit after a passage of a predetermined amount of time (col. 5 lines 40-51). 

20. Regarding claim 20: Claim 20 is rejected for the same reasons as claims 3 and 4, 
above. 

21 . Regarding claim 25: DeBellis does not disclose that the decryption apparatus further 
includes a judgment unit operable to judge whether or not the decrypted text is obtained 
correctly, the decryption key updating request unit instructs the encryption apparatus to update 
the decryption key, according to a result of the judgment made by the judgment unit, and the 
parameter initialization request unit instructs the encryption apparatus to change the value of 
the parameter to an initial value which decreases the probability of decryption error to a value 
less than or equal to a predetermined value, according to the result of the judgment made by 
the judgment unit. 

Geiringer discloses that the decryption apparatus further includes a judgment unit 
operable to judge whether or not the decrypted text is obtained correctly (page 27 lines 25-28), 

the decryption key updating request unit instructs the encryption apparatus to update the 
decryption key, according to a result of the judgment made by the judgment unit (page 28 lines 
12-20), and 

the parameter initialization request unit instructs the encryption apparatus to change the 
value of the parameter to an initial value which decreases the probability of decryption error to a 
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value less than or equal to a predetermined value, according to the result of the judgment made 
by the judgment unit (page 28 lines 18-20). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis by the decryption apparatus taught by Geiringer in 
order to create an efficient and secure encryption system based on mixing seeds (see Geiringer 
page 16 lines 24-25). 

22. Claims 8, 9, 22, and 28 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over DeBellis in view of Nishio et al. U.S. Patent No. 5,848,154 (hereinafter Nishio). 

23. Regarding claims 8 and 22: DeBellis discloses an updating unit as indicated regarding 
claim 1. DeBellis does not disclose that said updating unit updates the parameter stored in said 
storage unit according to the number of times said encryption unit performs encryption. 

Nishio discloses that said updating unit updates the parameter stored in said storage 
unit according to the number of times said encryption unit performs encryption (col. 3 lines 22- 
35). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis by the quantity management system taught by 
Nishio for the benefit of managing the number of times encryption is performed (see Nishio col. 
1 lines 50-62), 

24. Regarding claims 9 and 28: DeBellis discloses an updating unit as indicated regarding 
claim 1 . DeBellis does not disclose that said updating unit updates the parameter so that the 
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probability of the decryption error in decrypting the encrypted text increases according to an 
increase in the number of times said encryption apparatus performs encryption. 

Nishio discloses that the updating unit updates the parameter so that the probability of 
the decryption error in decrypting the encrypted text increases according to an increase in the 
number of times the encryption apparatus performs encryption (col. 3 lines 22-45). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis by the quantity management system taught by 
Nishio for the benefit of managing the number of times encryption is performed (see Nishio col. 
1 lines 50-62). 

25. Claims 15 and 16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Geiringer in view of Nishio. 

26. Regarding claim 15: Geiringer discloses a decryption apparatus including a decryption 
key updating request unit and said parameter initialization request unit send respectively, to the 
encryption apparatus, a request to update the decryption key and a request to initialize the 
parameter as indicated regarding claim 14. Geiringer does not disclose a request to pay a 
predetermined amount. 

Nishio discloses a request to pay a predetermined amount (col. 3 lines 22-35). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the decryption apparatus of Geiringer by the quantity use management system taught 
by Nishio for the benefit of managing the number of times decryption is performed (see Nishio 
col. 1 lines 50-62). 
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27. Regarding claim 16: Geiringer discloses said judgment unit that judges that the 
decrypted text is not obtained correctly, when the probability of the decryption error in 
decrypting the encrypted text during a predetermined period of time exceeds a predetermined 
threshold (page 28 cines 22-28). 

28. Claims 6, 21 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
DeBellis in view of Geiringer, further in view of Nishio. 

29. Regarding claim 6: DeBellis and Geiringer disclose an encryption apparatus, wherein 
said initialization unit sets the number of the terms whose coefficients indicate 1 in the random 
number polynomial to an initial value as indicated regarding claim 5, above. DeBellis and 
Geiringer do not disclose setting the number when the decryption apparatus has paid a 
predetermined amount. 

Nishio discloses setting the number when the decryption apparatus has paid a 
predetermined amount (col. 3 lines 22-35). 

Therefore, it would have been obvious to one skilled in the art at the time of the invention 
to modify the combination of DeBellis and Geiringer by the quantity use management system 
taught by Nishio for the benefit of managing payments for performing decryption (see Nishio col. 
1 lines 50-62). 

30. Regarding claim 21: the combination of DeBellis and Geiringer discloses an encryption 
system, wherein the decryption key updating request unit and the parameter initialization 
request unit respectively send, to the encryption apparatus, a request to update the decryption 
key and a request to initialize the parameter as indicated regarding claim 20, above. 
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DeBellis further discloses that the encryption apparatus includes: a decryption key 
updating unit operable to receive, from the decryption apparatus, the request to update the 
decryption key, and update the decryption key in response to the updating request col. 7 lines 
26-32). 

DeBellis does not disclose an initialization unit operable to receive the request to 
initialize the parameter from the decryption apparatus, and set, in response to the initialization 
request, the number of the terms whose coefficients indicate 1 in the random number 
polynomial to an initial value which decreases a probability of decryption error to a value less 
than or equal to a predetermined value. 

Geiringer discloses an initialization unit (page 3 lines 14-18) operable to receive the 
request to initialize' the parameter from the decryption apparatus, and set, in response to the 
initialization request, the number of the terms whose coefficients indicate 1 in the random 
number polynomial to an initial value which decreases a probability of decryption error to a 
value less than or equal to a predetermined value (page 28 lines 18-20). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the encryption system of DeBellis by the decryption apparatus taught by Geiringer in 
order to create an efficient and secure encryption system based on mixing seeds (see Geiringer 
page 16 lines 24-25). 

Neither DeBellis nor Geiringer disclose a system responsive to payment of a 
predetermined amount. 

Nishio discloses a system responsive to payment of a predetermined amount (col. 3 
lines 22-35). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the combination of DeBellis and Geiringer by the quantity use management system 
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taught by Nishio for the benefit of managing payments for an encryption system (see Nishio col. 
1 lines 50-62). 



31 . Regarding claim 24: Claim 24 is rejected for the same reasons as claims 4 and 21 , 
above. 

32. Claim 12 is rejected under 35 U.S.C. 103(a) as being unpatentable over DeBellis in 
view of Geiringer, further in view of Whyte, "Analysis of NTRUEncrypt Paddings, 
STRONG security that fits everywhere," NTRU, August 2002 (hereinafter Whyte). 
Regarding claim 12: the combination of DeBellis and Geiringer discloses an encryption 
apparatus wherein the encryption unit generates the encrypted text using the encryption 
algorithm used for the NTRU encryption method as indicated regarding claim 10, above. 

Neither DeBellis nor Geiringer disclose that the algorithm used for the NTRU encryption 
method is based on an EESS (Efficient Embedded Security Standard) method. 

Whyte discloses that the algorithm used for the NTRU encryption method is based on an 
EESS (Efficient Embedded Security Standard) method (Whyte page 7 line 2). 

Therefore it would have been obvious to one skilled in the art at the time of the invention 
to modify the combination of DeBellis and Geiringer by the EESS compatible NTRU encryption 
method as taught by Whyte in order to construct a standards compatible system (Whyte page 7 
line 2). 

Conclusion 

33. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time policy as 
set forth in 37 CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing date 
of this final action. 

34. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Laurel Lashley whose telephone number is 571-272-0693. The examiner 
can normally be reached on Monday - Thursday, alt Fridays btw 7:30 am & 5 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, Jr. can be reached on 571-272-3799. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Laurel Lashley 
Examiner 
Art Unit 2132 
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